Publish Advisories

GHSA-2c4m-59x9-fr2g
GHSA-2mhh-27v7-3vcx
GHSA-3p4g-rcw5-8298
GHSA-6mhc-hqr3-w466
GHSA-gvrq-cg5r-7chp

advisories/github-reviewed/2023/05/GHSA-2c4m-59x9-fr2g/GHSA-2c4m-59x9-fr2g.json

@@ -0,0 +1,62 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2c4m-59x9-fr2g",
+  "modified": "2023-05-12T20:19:25Z",
+  "published": "2023-05-12T20:19:25Z",
+  "aliases": [
+    "CVE-2023-29401"
+  ],
+  "summary": "Gin Web Framework does not properly sanitize filename parameter of Context.FileAttachment function",
+  "details": "The filename parameter of the Context.FileAttachment function is not properly sanitized. A maliciously crafted filename can cause the Content-Disposition header to be sent with an unexpected filename value or otherwise modify the Content-Disposition header. For example, a filename of \"setup.bat";x=.txt\" will be sent as a file named \"setup.bat\".\n\nIf the FileAttachment function is called with names provided by an untrusted source, this may permit an attacker to cause a file to be served with a name different than provided. Maliciously crafted attachment file name can modify the Content-Disposition header.",
+  "severity": [
+
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Go",
+        "name": "github.com/gin-gonic/gin"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "1.3.1-0.20190301021747-ccb9e902956d"
+            },
+            {
+              "last_affected": "1.9.0"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/gin-gonic/gin/issues/3555"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/gin-gonic/gin/pull/3556"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/gin-gonic/gin"
+    },
+    {
+      "type": "WEB",
+      "url": "https://pkg.go.dev/vuln/GO-2023-1737"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2023-05-12T20:19:25Z",
+    "nvd_published_at": null
+  }
+}

advisories/github-reviewed/2023/05/GHSA-3p4g-rcw5-8298/GHSA-3p4g-rcw5-8298.json

@@ -0,0 +1,92 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3p4g-rcw5-8298",
+  "modified": "2023-05-12T20:19:50Z",
+  "published": "2023-05-12T20:19:50Z",
+  "aliases": [
+    "CVE-2023-32082"
+  ],
+  "summary": "etcd Key name can be accessed via LeaseTimeToLive API",
+  "details": "### Impact\nLeaseTimeToLive API allows access to key names (not value) associated to a lease when `Keys` parameter is true, even a user doesn't have read permission to the keys. The impact is limited to a cluster which enables auth (RBAC).\n\n### Patches\n< v3.4.26 and < v3.5.9 are affected.\n\n### Workarounds\nNo.\n\n### Reporter\nYoni Rozenshein",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Go",
+        "name": "github.com/etcd-io/etcd"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "3.4.26"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Go",
+        "name": "github.com/etcd-io/etcd"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "3.5.0"
+            },
+            {
+              "fixed": "3.5.9"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/etcd-io/etcd/security/advisories/GHSA-3p4g-rcw5-8298"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32082"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/etcd-io/etcd/pull/15656"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/etcd-io/etcd"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/etcd-io/etcd/blob/main/CHANGELOG/CHANGELOG-3.4.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/etcd-io/etcd/blob/main/CHANGELOG/CHANGELOG-3.5.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-200"
+    ],
+    "severity": "LOW",
+    "github_reviewed": true,
+    "github_reviewed_at": "2023-05-12T20:19:50Z",
+    "nvd_published_at": null
+  }
+}

advisories/github-reviewed/2023/05/GHSA-6mhc-hqr3-w466/GHSA-6mhc-hqr3-w466.json

@@ -1,23 +1,46 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6mhc-hqr3-w466",
-  "modified": "2023-05-12T00:30:18Z",
+  "modified": "2023-05-12T20:19:08Z",
   "published": "2023-05-12T00:30:18Z",
   "aliases": [
     "CVE-2023-31508"
   ],
+  "summary": "PrestaShop Cross-site Scripting vulnerability",
   "details": "A cross-site scripting (XSS) vulnerability in PrestaShop v1.7.7.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the message parameter in /contactform/contactform.php.",
   "severity": [
 
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "prestashop/prestashop"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "last_affected": "1.7.7.4"
+            }
+          ]
+        }
+      ]
+    }
   ],
   "references": [
     {
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-31508"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/PrestaShop/PrestaShop"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/mustgundogdu/Research/blob/main/PrestaShop/ReflectedXSS_1.7.7.4.md"
@@ -25,11 +48,11 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-79"
     ],
-    "severity": null,
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2023-05-12T20:19:08Z",
     "nvd_published_at": null
   }
 }

advisories/github-reviewed/2023/05/GHSA-gvrq-cg5r-7chp/GHSA-gvrq-cg5r-7chp.json

@@ -0,0 +1,84 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-gvrq-cg5r-7chp",
+  "modified": "2023-05-12T20:20:19Z",
+  "published": "2023-05-12T20:20:19Z",
+  "aliases": [
+    "CVE-2023-32081"
+  ],
+  "summary": "Vert.x STOMP server process client frames that would not send initially a connect frame",
+  "details": "### Impact\nA Vert.x STOMP server processes client STOMP frames without checking that the client send an initial CONNECT frame replied with a successful CONNECTED frame. The client can subscribe to a destination or publish message without prior authentication. Any Vert.x STOMP server configured with an authentication handler is impacted.\n\n### Patches\nThe issue is patched in Vert.x 4.4.2 and Vert.x 3.9.16\n\n### Workarounds\nNo trivial workaround.\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "io.vertx:vertx-stomp"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "3.1.0"
+            },
+            {
+              "fixed": "3.9.16"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "io.vertx:vertx-stomp"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "4.0.0"
+            },
+            {
+              "fixed": "4.4.2"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/vert-x3/vertx-stomp/security/advisories/GHSA-gvrq-cg5r-7chp"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32081"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/vert-x3/vertx-stomp/commit/0de4bc5a44ddb57e74d92c445f16456fa03f265b"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/vert-x3/vertx-stomp"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-287"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2023-05-12T20:20:19Z",
+    "nvd_published_at": null
+  }
+}